<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">Hello Henrik<br>
<br>
I took your advice and modified client-local.cfg and replaced the
hashes with 'md5'. Unfortunatelly it still doesn't work. In my
browser when I click on "client data" I see this (in the files
section):<br>
<br>
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
<pre style="color: rgb(0, 0, 0); font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; word-wrap: break-word; white-space: pre-wrap;">[<a class="moz-txt-link-freetext" href="file:/etc/shadow">file:/etc/shadow</a>]
type:100000 (file)
mode:0 (----------)
linkcount:1
owner:0 (root)
group:0 (root)
size:2229
clock:1391509248 (2014/02/04-10:20:48)
atime:1369319982 (2013/05/23-14:39:42)
ctime:1369849694 (2013/05/29-17:48:14)
mtime:1369849694 (2013/05/29-17:48:14)
[<a class="moz-txt-link-freetext" href="file:/etc/passwd">file:/etc/passwd</a>]
type:100000 (file)
mode:644 (-rw-r--r--)
linkcount:1
owner:0 (root)
group:0 (root)
size:2025
clock:1391509248 (2014/02/04-10:20:48)
atime:1376392921 (2013/08/13-11:22:01)
ctime:1376392921 (2013/08/13-11:22:01)
mtime:1376392921 (2013/08/13-11:22:01)
</pre>
<br class="Apple-interchange-newline">
There isn't any md5 hash in there. :|<br>
<br>
<br>
On 02/04/2014 12:04 PM, <a class="moz-txt-link-abbreviated" href="mailto:henrik@hswn.dk">henrik@hswn.dk</a> wrote:<br>
</div>
<blockquote cite="mid:d5e3f5a19748da455981c71a0d20629f@hswn.dk"
type="cite">Den 2014-02-04 10:44, Ciprian Parfon skrev:
<br>
<blockquote type="cite">Hello
<br>
<br>
I came to you again, with hope that someone bumped into this
problem
<br>
and could give me some help.
<br>
<br>
I have configured XYmon to check some files with MD5 but it
doesn't
<br>
work as expected. My Xymon server is 4.3.10. On the server I
edited
<br>
'client-local.cfg' like so
<br>
<br>
[dev]
<br>
<a class="moz-txt-link-freetext" href="file:/etc/passwd:4736b427730af4ae0d5e11c098be4ff6">file:/etc/passwd:4736b427730af4ae0d5e11c098be4ff6</a>
<br>
<a class="moz-txt-link-freetext" href="file:/etc/shadow:aadf4e9f14a8cceab31d635f9ea5fdb8">file:/etc/shadow:aadf4e9f14a8cceab31d635f9ea5fdb8</a>
<br>
</blockquote>
<br>
You don't include the hash in client-local.cfg - you just tell the
client what kind of hash it should calculate. So this should be
<br>
<br>
[dev]
<br>
<a class="moz-txt-link-freetext" href="file:/etc/passwd:md5">file:/etc/passwd:md5</a>
<br>
<a class="moz-txt-link-freetext" href="file:/etc/shadow:md5">file:/etc/shadow:md5</a>
<br>
<br>
<blockquote type="cite">Also, I have in analisys.cfg the following
entry:
<br>
<br>
HOST=%dev*
<br>
FILE /etc/passwd MD5=4736b427730af4ae0d5e11c098be4ff6 COLOR=red
<br>
FILE /etc/shadow MD5=aadf4e9f14a8cceab31d635f9ea5fdb8 COLOR=red
<br>
</blockquote>
<br>
Your pattern match will find a host name "dev", but it will in
fact match any host that has "de" in the hostname. '*' is not a
wilcard, it is a counter meaning "0 or more of the preceding
character" - 'v' in this case - and you haven't anchored the 'de'.
<br>
<br>
You probably want
<br>
HOST=%^dev
<br>
<br>
<br>
Regards,
<br>
Henrik
<br>
<br>
_______________________________________________
<br>
Xymon mailing list
<br>
<a class="moz-txt-link-abbreviated" href="mailto:Xymon@xymon.com">Xymon@xymon.com</a>
<br>
<a class="moz-txt-link-freetext" href="http://lists.xymon.com/mailman/listinfo/xymon">http://lists.xymon.com/mailman/listinfo/xymon</a>
<br>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Ciprian Parfon
System & Network Engineer
+40 721879113
<a class="moz-txt-link-abbreviated" href="mailto:ciprian.parfon@gmail.com">ciprian.parfon@gmail.com</a></pre>
</body>
</html>